Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa
File:                     26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa (raw, json)
Hash identifier:          Cz8InCsrsMCfMIneLkuJ2DPZ4hK9kIX57Pke6mUOvTg=
Subject key identifier:   02:64:7C:9C:14:3E:9F:02:E1:41:E0:9E:4B:BB:BE:1C:3B:1B:02:7F
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F432858484945642FD69CC49D4A675358
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     14297
IP address blocks:        206.201.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:64:2f:d6:9c:c4:9d:4a:67:53:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=a59232cd-1532-4482-9234-32b3f0e81f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:0c:c1:56:61:6d:b4:99:fb:62:a3:ea:c6:
                    0e:97:f3:d8:63:c8:a4:18:71:58:fb:f4:78:fc:11:
                    72:7d:ec:28:49:80:6c:65:04:f5:79:20:bd:25:9f:
                    84:8d:f0:97:07:36:6a:c8:3b:07:aa:fc:d4:e5:19:
                    a7:dd:e4:6f:33:56:b6:f9:b1:a6:8c:c5:ea:3c:f5:
                    c3:b3:ed:79:fd:8b:6c:4b:64:59:e8:53:af:f1:ae:
                    12:70:ce:cb:00:4e:f9:fc:af:6d:a7:f2:fd:23:5b:
                    08:cb:9a:9a:4e:ef:d1:61:08:f0:79:37:62:4b:f2:
                    92:d3:aa:4a:e5:fa:ca:8d:54:15:e7:9a:11:d2:2a:
                    16:0d:59:c1:24:eb:93:f8:cc:66:c8:50:9c:52:52:
                    b7:7e:f8:e8:87:49:0a:1c:67:5e:e0:af:71:f2:3b:
                    f9:19:02:a6:c1:74:14:aa:fe:7b:cc:6d:11:bd:c5:
                    0d:d3:9e:39:f2:6a:ba:99:be:45:45:eb:d6:99:b3:
                    af:4b:a7:43:1f:34:58:62:fd:86:77:57:ac:d8:57:
                    ab:88:31:66:9d:21:66:5a:b8:46:c6:89:5a:c8:b1:
                    e0:e4:39:1a:80:65:b5:e6:8a:0b:0d:46:04:02:2f:
                    d9:7c:5a:45:f0:5b:e7:20:ab:3c:24:1f:ac:1f:18:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:7C:9C:14:3E:9F:02:E1:41:E0:9E:4B:BB:BE:1C:3B:1B:02:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:28:d8:56:cc:c5:21:0d:e4:df:44:ae:a1:ec:dd:2e:d5:c9:
         65:38:30:92:67:6d:c5:da:a2:1f:c5:a7:8e:da:f7:cb:a5:79:
         5e:17:3b:e0:51:5d:42:3d:f5:61:5b:36:dd:1e:1f:cf:e6:9e:
         a6:0f:21:71:64:13:da:b8:c9:45:bc:2c:28:81:e1:a8:50:5f:
         51:77:26:93:cb:a6:77:69:a4:bd:b5:f2:ef:bb:32:51:17:19:
         0b:8d:8b:c8:0c:2f:86:eb:04:c3:ac:da:81:1b:22:68:d8:0f:
         51:eb:0a:bf:17:d4:89:c2:09:30:d3:fb:ca:e2:fa:2e:a3:df:
         cf:7d:c9:5e:f0:a3:3c:84:86:d4:48:f7:ff:52:af:4b:7d:73:
         c5:15:93:60:dd:5a:29:8b:f5:fb:42:05:a8:5c:dd:18:92:9d:
         8f:f9:f1:28:54:77:cd:a8:5c:34:24:0c:fe:b1:37:fe:f1:19:
         70:a4:40:cf:92:eb:51:b4:e2:5b:40:a6:f2:1e:67:9d:19:b8:
         42:df:d8:a2:81:41:1a:f3:b0:01:05:a9:23:4b:5b:60:dd:46:
         cb:92:e3:83:b7:b1:d7:9a:1d:ef:54:2f:ff:0a:1a:8e:99:bc:
         75:e0:6a:07:ae:24:f8:21:f3:23:04:aa:d5:e5:cd:ed:8e:f2:
         7d:0a:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:46 2025 by rpki-client